Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity

Image quality assessment: from error visibility to structural similarity

Zhou Wang, A. Bovik, H. R. Sheikh, and E. P. Simoncelli · 2004

Earlier work this paper cites.

Imagenet: A large-scale hierarchical image database

Jia Deng, W. Dong, R. Socher, L. Li, K. Li, and Li Fei-Fei · 2009

Earlier work this paper cites.

Fsim: A feature similarity index for image quality assessment

L. Zhang, Lei Zhang, X. Mou, and D. Zhang · 2011

Earlier work this paper cites.

Very deep convolutional networks for large-scale image recognition

Original

Karen Simonyan and Andrew Zisserman · 2014

Earlier work this paper cites.

Intriguing properties of neural networks

Original

Christian Szegedy, W. Zaremba, Ilya Sutskever, Joan Bruna, D. Erhan, Ian J. Goodfellow, and R. Fergus · 2014

Earlier work this paper cites.

Explaining and harnessing adversarial examples

Original

Ian J. Goodfellow, Jonathon Shlens, and Christian Szegedy · 2015

Earlier work this paper cites.

Faster r-cnn: Towards real-time object detection with region proposal networks

Shaoqing Ren, Kaiming He, Ross B. Girshick, and J. Sun · 2015

Earlier work this paper cites.

Very deep convolutional networks for large-scale image recognition

Original

K. Simonyan and Andrew Zisserman · 2015

Earlier work this paper cites.

Deep residual learning for image recognition

Kaiming He, X. Zhang, Shaoqing Ren, and Jian Sun · 2016

Earlier work this paper cites.

Deep residual learning for image recognition

Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun · 2016

Earlier work this paper cites.

Perceptual losses for real-time style transfer and super-resolution

J. Johnson, Alexandre Alahi, and Li Fei-Fei · 2016

Cited alongside, same era.

The limitations of deep learning in adversarial settings

Nicolas Papernot, P. McDaniel, S. Jha, Matt Fredrikson, Z. Y. Celik, and A. Swami · 2016

Cited alongside, same era.

Rethinking the inception architecture for computer vision

Christian Szegedy, V. Vanhoucke, S. Ioffe, Jon Shlens, and Z. Wojna · 2016

Cited alongside, same era.

Towards evaluating the robustness of neural networks

Nicholas Carlini and David Wagner · 2017

Cited alongside, same era.

Adversarial examples in the physical world

Original

A. Kurakin, Ian J. Goodfellow, and S. Bengio · 2017

Cited alongside, same era.

Shield: Fast, practical defense and vaccination for deep learning using jpeg compression

Mobilenetv2: Inverted residuals and linear bottlenecks

Mark Sandler, A. Howard, Menglong Zhu, A. Zhmoginov, and Liang-Chieh Chen · 2018

Later among the works it cites.

Feature squeezing: Detecting adversarial examples in deep neural networks

Original

Weilin Xu, David Evans, and Y. Qi · 2018

Later among the works it cites.

The unreasonable effectiveness of deep features as a perceptual metric

Richard Zhang, Phillip Isola, Alexei A Efros, Eli Shechtman, and Oliver Wang · 2018

Later among the works it cites.

Efficientnet: Rethinking model scaling for convolutional neural networks

Mingxing Tan and Quoc Le · 2019

Later among the works it cites.

Improving transferability of adversarial examples with input diversity

Cihang Xie, Zhishuai Zhang, Jianyu Wang, Yuyin Zhou, Zhou Ren, and A. Yuille · 2019

Later among the works it cites.